This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft File: k89OeSfhBJZOTJb0QWSc40F0zjo.mft (raw, json) Hash identifier: RO7V6UrG8Gsat/HfSqCgeyw0GKq+804mL1slIulYseo= Subject key identifier: 21:97:21:50:63:9A:DD:D8:B0:6A:1B:3D:5E:11:9D:E4:FA:70:D0:B3 Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A Certificate issuer: /CN=93cf4e7927e104964e4c96f441649ce34174ce3a Certificate serial: 019AF2ADCA0AE2C4FEBF0B4B6BFC3F20B485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 08:01:06 +0000 Manifest this update: Sat 06 Dec 2025 08:01:06 +0000 Manifest next update: Sun 07 Dec 2025 08:01:06 +0000 Files and hashes: 1: DVEsULbgc1uy6V52nNRIcIhepiA.roa (hash: XNV6aUJyGeh2Aa9mxZ1t5TwCl8DNIg+I/K5KbgR9/Ys=) 2: k89OeSfhBJZOTJb0QWSc40F0zjo.crl (hash: PnoQp5rCVUv7hUNxkCL0Mv1+k80ef4V37fCmhf3M7Yw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ca:0a:e2:c4:fe:bf:0b:4b:6b:fc:3f:20:b4:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a Validity Not Before: Dec 6 08:01:06 2025 GMT Not After : Dec 7 08:01:06 2025 GMT Subject: CN=21972150639addd8b06a1b3d5e119de4fa70d0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f1:75:88:fe:06:38:c8:f8:32:7a:e3:a3:15: b7:ac:e1:83:36:82:de:c1:a5:0e:da:c7:1e:92:f3: 75:c0:a3:98:2d:92:1c:91:7e:20:d8:94:2d:7b:b5: 2e:b5:67:3f:40:e6:01:9a:5b:49:f3:0f:cd:b4:08: 81:92:db:b6:fc:1e:2b:ea:88:0d:c4:6a:f3:49:05: 79:1d:cb:95:51:c4:11:21:19:a0:b3:d4:c6:c0:6e: 05:73:07:87:7a:4a:a7:9b:a4:95:b5:b3:81:eb:11: f4:1c:9e:9e:4d:1b:61:5d:03:1a:89:f0:ce:6b:97: b1:ba:b2:14:df:c6:57:7d:c0:ce:e3:cb:d0:3f:ce: b0:d6:fc:03:4a:a7:46:06:47:33:0f:4c:9a:8e:70: 2b:55:fd:b0:89:25:b5:6d:3e:2f:71:dd:4d:9a:24: c8:52:72:b6:38:88:30:1a:8a:63:f3:51:97:58:8f: 84:f5:66:db:a7:b3:45:2c:5e:4e:fb:7a:ea:04:de: 02:b8:16:e7:c9:09:29:1c:ca:86:7f:6d:26:ec:08: 49:2e:54:14:5d:66:96:9e:a1:05:85:11:1e:40:59: cb:65:07:9c:df:5e:07:84:88:18:d3:8d:8f:55:54: eb:a3:8b:45:70:d1:88:c4:86:ce:40:6f:29:79:57: ff:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:97:21:50:63:9A:DD:D8:B0:6A:1B:3D:5E:11:9D:E4:FA:70:D0:B3 X509v3 Authority Key Identifier: keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:4b:44:dc:24:ae:73:9b:09:45:30:e3:f9:7d:83:5f:28:8f: 38:63:33:15:1b:7d:38:7a:24:d9:9f:9f:b7:20:b1:37:b7:d2: 46:ce:6e:31:c3:70:42:d6:a6:57:69:a7:54:17:a6:bc:8b:73: 9c:52:6f:ef:0d:ec:fc:e9:a2:fc:16:5c:6c:20:03:bf:3c:b0: 90:d9:5c:02:5c:66:2b:80:0e:20:2f:73:0c:bf:35:9b:3a:ac: 6f:bd:4f:e3:fe:23:2f:4a:a6:31:72:3c:d0:fa:ad:f7:f5:bf: 4e:6d:6b:c6:ff:ce:1a:ac:22:9a:2b:a3:38:e0:d2:68:82:f8: 23:67:59:aa:6f:d3:46:df:ac:86:1f:cc:16:b7:ff:86:87:4e: 9a:10:86:f1:e0:89:37:07:6d:c6:f5:c3:84:63:de:92:7b:80: 30:30:65:7e:f4:ca:22:5c:87:df:11:68:0d:e0:51:5f:29:b3: 5b:6c:aa:6f:d5:b5:1b:92:1a:88:b9:89:8f:f0:2b:f7:07:a0: cc:a5:b8:e4:01:c1:50:d0:41:f7:5d:9d:97:61:fb:44:b4:d9: 0b:02:ce:8a:cb:2f:54:7a:43:9a:d5:5b:2e:51:7f:6f:0f:49: 7b:82:f8:c9:1a:c1:ae:a7:7a:a6:51:00:d7:e9:e7:75:b7:92: 54:08:b3:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcoK4sT+vwtLa/w/ILSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzY2Y0ZTc5MjdlMTA0OTY0ZTRjOTZmNDQxNjQ5Y2UzNDE3 NGNlM2EwHhcNMjUxMjA2MDgwMTA2WhcNMjUxMjA3MDgwMTA2WjAzMTEwLwYDVQQD EygyMTk3MjE1MDYzOWFkZGQ4YjA2YTFiM2Q1ZTExOWRlNGZhNzBkMGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PF1iP4GOMj4MnrjoxW3rOGDNoLe waUO2scekvN1wKOYLZIckX4g2JQte7UutWc/QOYBmltJ8w/NtAiBktu2/B4r6ogN xGrzSQV5HcuVUcQRIRmgs9TGwG4FcweHekqnm6SVtbOB6xH0HJ6eTRthXQMaifDO a5exurIU38ZXfcDO48vQP86w1vwDSqdGBkczD0yajnArVf2wiSW1bT4vcd1NmiTI UnK2OIgwGopj81GXWI+E9Wbbp7NFLF5O+3rqBN4CuBbnyQkpHMqGf20m7AhJLlQU XWaWnqEFhREeQFnLZQec314HhIgY042PVVTro4tFcNGIxIbOQG8peVf/MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGXIVBjmt3YsGobPV4RneT6cNCzMB8GA1UdIwQY MBaAFJPPTnkn4QSWTkyW9EFknONBdM46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wYjAwMDctZDMwYS00OTk0LWFiMDAt YmQ1YjRlNTQ3MTJiLzEvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wYjAwMDctZDMwYS00OTk0LWFiMDAtYmQ1YjRlNTQ3MTJi LzEvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEtE3CSu c5sJRTDj+X2DXyiPOGMzFRt9OHok2Z+ftyCxN7fSRs5uMcNwQtamV2mnVBemvItz nFJv7w3s/Omi/BZcbCADvzywkNlcAlxmK4AOIC9zDL81mzqsb71P4/4jL0qmMXI8 0Pqt9/W/Tm1rxv/OGqwimiujOODSaIL4I2dZqm/TRt+shh/MFrf/hodOmhCG8eCJ NwdtxvXDhGPeknuAMDBlfvTKIlyH3xFoDeBRXymzW2yqb9W1G5IaiLmJj/Ar9weg zKW45AHBUNBB912dl2H7RLTZCwLOissvVHpDmtVbLlF/bw9Je4L4yRrBrqd6plEA 1+nndbeSVAizIg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:39 2025 by rpki-client